Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
File: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft (raw, json)
Hash identifier: tdTC3b0cTdBahnu3WA0UjJetFQfgonV12GD4rEaZBAM=
Subject key identifier: DD:33:BA:58:21:66:11:9F:AE:1F:B2:55:33:47:EA:41:7B:9F:7A:B8
Authority key identifier: E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69
Certificate issuer: /CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69
Certificate serial: 01A1C10A751112D75257E0FF71FAAB9C0EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
Manifest number: 1AE5
Signing time: Mon 09 Nov 2026 16:00:50 +0000
Manifest this update: Mon 09 Nov 2026 16:00:50 +0000
Manifest next update: Tue 10 Nov 2026 16:00:50 +0000
Files and hashes: 1: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl (hash: l2+y9ZAawEp6gGz8tjDPwzLQIpc5E3slj2cDQOP7hlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:0a:75:11:12:d7:52:57:e0:ff:71:fa:ab:9c:0e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69
Validity
Not Before: Nov 9 16:00:50 2026 GMT
Not After : Nov 10 16:00:50 2026 GMT
Subject: CN=dd33ba582166119fae1fb2553347ea417b9f7ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:67:e2:82:f2:d0:b7:ba:5b:bf:4d:d8:11:
ca:4e:d9:89:5a:00:93:ff:94:ec:22:bb:c8:eb:0e:
4d:8b:fe:42:ee:51:c2:eb:5d:84:79:0d:31:5e:e2:
58:a2:09:fb:2d:1e:dd:a8:59:34:f5:8b:6d:a0:d6:
25:c1:42:7a:39:a1:9a:2e:20:00:9e:ba:ce:4b:86:
8d:36:78:48:6d:ff:2a:4b:10:ef:f4:d9:3b:2b:95:
2c:96:cc:ba:5c:04:44:90:ff:77:9d:02:60:a7:aa:
b9:b4:85:78:4f:41:5f:85:da:49:83:9b:6f:4e:a7:
14:ec:35:49:28:49:e1:cc:0f:a8:f0:65:9d:60:5e:
54:99:78:5a:80:71:61:e8:07:02:e5:dc:a3:f0:26:
52:e7:58:00:a5:68:35:52:c7:9f:79:09:fc:29:86:
ca:d3:7c:56:0e:56:1a:eb:6b:c8:8c:59:c8:27:c6:
48:e6:18:51:cc:0a:71:8f:ae:a4:37:c8:fe:99:59:
05:0d:17:27:51:28:56:d9:28:04:09:d5:d1:bc:7c:
78:c3:11:fa:7b:16:40:d2:b3:d4:b6:2b:a9:fb:75:
95:88:7c:0e:25:19:1f:b1:09:7f:96:d1:3c:01:02:
da:da:d2:2a:15:f5:8c:54:90:74:03:00:0b:1e:09:
66:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:33:BA:58:21:66:11:9F:AE:1F:B2:55:33:47:EA:41:7B:9F:7A:B8
X509v3 Authority Key Identifier:
keyid:E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:86:10:c5:26:05:7c:75:ee:aa:0b:58:b1:d3:9f:55:fc:94:
f0:ae:8a:96:18:ed:d4:2b:af:c5:55:11:f3:ef:19:0a:3d:bc:
73:02:b4:43:a7:64:d5:76:b5:51:3a:5f:ba:51:d5:76:2e:bb:
7e:bf:13:f2:78:19:c9:94:10:38:75:11:44:66:99:5a:27:fe:
84:5a:f7:25:f7:2c:29:e6:34:6d:23:19:df:13:0a:ce:08:8c:
4c:94:08:ba:a2:11:46:d8:e2:6d:6f:9b:d6:97:38:4c:e3:08:
1c:60:c6:43:c4:91:37:17:ea:82:6f:f6:5c:28:78:07:ea:08:
9a:ec:36:40:c0:51:d2:89:83:1a:19:9c:8e:55:81:9e:01:2b:
11:a3:98:76:e0:79:71:26:f5:58:29:57:e7:48:c2:9a:87:61:
4f:1c:47:76:ac:3b:ae:54:e5:0a:ef:d8:b0:97:58:77:f8:f1:
00:4a:39:4e:59:e4:44:68:24:4d:58:f3:1e:c1:b5:7f:d9:c6:
14:af:70:90:c6:a4:56:80:1c:4c:09:df:06:26:3c:6f:1d:ca:
d8:12:d8:34:14:e8:9c:b6:18:ba:7a:ec:b9:5f:d0:41:10:28:
97:27:a1:d8:63:ee:82:08:c8:90:6b:b2:8b:1f:d9:c0:ac:d3:
91:ad:a8:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHBCnUREtdSV+D/cfqrnA69MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYTRkMTQ1ZWU4OWIyN2IxNTUzZDU1MWMyMGExNWJjNmJi
ZjZkNjkwHhcNMjYxMTA5MTYwMDUwWhcNMjYxMTEwMTYwMDUwWjAzMTEwLwYDVQQD
EyhkZDMzYmE1ODIxNjYxMTlmYWUxZmIyNTUzMzQ3ZWE0MTdiOWY3YWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppBn4oLy0Le6W79N2BHKTtmJWgCT
/5TsIrvI6w5Ni/5C7lHC612EeQ0xXuJYogn7LR7dqFk09YttoNYlwUJ6OaGaLiAA
nrrOS4aNNnhIbf8qSxDv9Nk7K5Uslsy6XAREkP93nQJgp6q5tIV4T0FfhdpJg5tv
TqcU7DVJKEnhzA+o8GWdYF5UmXhagHFh6AcC5dyj8CZS51gApWg1UsefeQn8KYbK
03xWDlYa62vIjFnIJ8ZI5hhRzApxj66kN8j+mVkFDRcnUShW2SgECdXRvHx4wxH6
exZA0rPUtiup+3WViHwOJRkfsQl/ltE8AQLa2tIqFfWMVJB0AwALHglmsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0zulghZhGfrh+yVTNH6kF7n3q4MB8GA1UdIwQY
MBaAFOKk0UXuibJ7FVPVUcIKFbxrv21pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHFUUlJlNkpzbnNWVTlWUndnb1Z2R3VfYldrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZjY0MWItZTJhNS00YzFhLWJmMjEt
YzNiOWYyMDEzMzJlLzEvNHFUUlJlNkpzbnNWVTlWUndnb1Z2R3VfYldrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZjY0MWItZTJhNS00YzFhLWJmMjEtYzNiOWYyMDEzMzJl
LzEvNHFUUlJlNkpzbnNWVTlWUndnb1Z2R3VfYldrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4YQxSYF
fHXuqgtYsdOfVfyU8K6Klhjt1CuvxVUR8+8ZCj28cwK0Q6dk1Xa1UTpfulHVdi67
fr8T8ngZyZQQOHURRGaZWif+hFr3JfcsKeY0bSMZ3xMKzgiMTJQIuqIRRtjibW+b
1pc4TOMIHGDGQ8SRNxfqgm/2XCh4B+oImuw2QMBR0omDGhmcjlWBngErEaOYduB5
cSb1WClX50jCmodhTxxHdqw7rlTlCu/YsJdYd/jxAEo5TlnkRGgkTVjzHsG1f9nG
FK9wkMakVoAcTAnfBiY8bx3K2BLYNBTonLYYunrsuV/QQRAolyeh2GPuggjIkGuy
ix/ZwKzTka2oYg==
-----END CERTIFICATE-----
Generated at Tue Nov 10 01:58:08 2026 by rpki-client